$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/dd70c3a1-6ad0-4cdd-aad7-613381f0e60d/6f20c9d8-107e-3161-8366-714092e5749f.roa File: 6f20c9d8-107e-3161-8366-714092e5749f.roa (raw, json) Hash identifier: 1f05AajqRD2/Uq8GF6PwCZ5G94A49e8S6rkns3LJiY4= Subject key identifier: 68:EB:41:F7:A6:64:FD:63:6C:96:E4:D7:69:68:65:69:07:05:30:64 Certificate issuer: /CN=dd70c3a1-6ad0-4cdd-aad7-613381f0e60d Certificate serial: 010D0C9F43285849C0A4D8A94C2484C2E3BDFE00 Authority key identifier: 33:1B:5C:1A:CE:D6:7A:D6:BF:82:2F:90:2E:FA:46:1C:C1:51:5B:6A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/dd70c3a1-6ad0-4cdd-aad7-613381f0e60d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/dd70c3a1-6ad0-4cdd-aad7-613381f0e60d/6f20c9d8-107e-3161-8366-714092e5749f.roa Signing time: Mon 05 May 2025 13:01:00 +0000 ROA not before: Mon 05 May 2025 13:01:00 +0000 ROA not after: Sun 03 Aug 2025 13:01:00 +0000 asID: 46657 IP address blocks: 2602:ff25:e00::/39 maxlen: 39 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/dd70c3a1-6ad0-4cdd-aad7-613381f0e60d/dd70c3a1-6ad0-4cdd-aad7-613381f0e60d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/dd70c3a1-6ad0-4cdd-aad7-613381f0e60d/dd70c3a1-6ad0-4cdd-aad7-613381f0e60d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/dd70c3a1-6ad0-4cdd-aad7-613381f0e60d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c0:a4:d8:a9:4c:24:84:c2:e3:bd:fe:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dd70c3a1-6ad0-4cdd-aad7-613381f0e60d Validity Not Before: May 5 13:01:00 2025 GMT Not After : Aug 3 13:01:00 2025 GMT Subject: CN=dbf8639b-73a9-4d7f-877c-013311dee5ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:e6:29:32:ec:f3:0c:99:58:bb:6a:26:4c:f1: d1:42:57:70:3b:7c:f5:be:ea:2d:f6:03:10:46:50: 8c:5c:8a:b2:c5:b1:d8:dd:fe:e5:0b:44:15:24:f0: 98:dd:98:9d:8c:c2:11:0a:6f:88:a7:1d:65:a4:44: cc:5d:fd:d8:1a:e3:28:56:9c:2c:ed:2e:5a:82:63: 9e:82:31:87:f1:67:a8:c1:fd:fe:c6:c6:26:8d:23: a9:b9:2e:04:e5:b0:ab:90:6f:00:24:18:d0:c6:a0: c2:e6:2c:45:42:cf:96:c2:aa:7b:09:01:60:c0:9f: 1a:60:ad:42:01:fc:fb:07:9e:93:8a:87:fd:db:bd: de:13:9f:4e:fd:d1:a9:b8:23:f8:d2:0d:56:af:76: 8c:af:fe:db:3d:d5:f0:ac:2c:ee:f5:3d:22:e2:d1: c9:31:c6:42:3a:dd:85:40:5b:5a:10:4c:3b:1a:8e: 78:f3:15:fd:d5:9b:d7:66:23:ae:39:15:e6:a9:24: d1:a5:43:c8:c0:e7:33:df:cd:f8:71:f6:49:77:ac: 16:e2:29:ce:b1:9d:3d:2e:15:cd:f2:17:ea:f4:01: 47:0b:1a:0b:e9:c9:fb:f9:f8:fb:af:fe:7b:1b:ca: de:ff:21:82:a5:56:3b:69:7f:8c:ac:e7:05:83:86: 40:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:EB:41:F7:A6:64:FD:63:6C:96:E4:D7:69:68:65:69:07:05:30:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/dd70c3a1-6ad0-4cdd-aad7-613381f0e60d/6f20c9d8-107e-3161-8366-714092e5749f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/dd70c3a1-6ad0-4cdd-aad7-613381f0e60d/dd70c3a1-6ad0-4cdd-aad7-613381f0e60d.crl X509v3 Authority Key Identifier: keyid:33:1B:5C:1A:CE:D6:7A:D6:BF:82:2F:90:2E:FA:46:1C:C1:51:5B:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/dd70c3a1-6ad0-4cdd-aad7-613381f0e60d.cer sbgp-ipAddrBlock: critical IPv6: 2602:ff25:e00::/39 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:7a:3d:a9:2d:c3:1b:c6:85:a7:2d:fb:b8:ae:ee:1e:6b:64: 34:1c:d7:bf:f3:e9:49:f9:34:7a:b0:68:c5:15:43:af:c8:8a: 77:08:58:bb:bb:5a:61:ab:1f:2c:b8:4f:cc:2f:9f:24:56:bb: 0e:7b:b5:c6:d2:1b:9b:26:46:60:9d:9e:b3:96:3b:11:f6:6e: 76:bf:77:c9:14:f6:07:17:88:e4:b2:b3:07:1e:b4:17:30:10: aa:ca:82:75:eb:ba:f4:d3:e7:f1:02:3b:9a:51:6b:44:24:d4: cd:0d:af:e7:2f:60:b8:1b:16:ef:d1:89:50:97:21:f1:83:11: 62:a7:5e:77:39:6c:9e:36:77:9d:c2:bc:e7:3d:96:51:e1:6d: 26:7c:bd:46:3c:6a:76:1b:c0:cd:39:e0:73:6d:e1:37:83:d0: 11:4b:a5:30:88:57:5c:e7:2f:be:0d:44:73:b2:bf:69:96:e2: 23:31:c2:0b:b8:44:1a:89:95:82:34:00:f4:df:87:42:b1:f2: 06:3e:76:89:77:a9:6d:41:bc:02:13:35:f0:b6:2a:df:78:1a: cb:5c:33:62:17:97:40:a2:5f:ac:bb:95:ff:bb:59:6a:8b:a3: ca:16:81:7c:db:b0:d0:5d:fb:6b:09:3d:24:15:dc:99:f7:4e: 8d:fd:47:72 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEnApNipTCSEwuO9/gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGQ3MGMzYTEtNmFkMC00Y2RkLWFhZDctNjEzMzgxZjBl NjBkMB4XDTI1MDUwNTEzMDEwMFoXDTI1MDgwMzEzMDEwMFowLzEtMCsGA1UEAxMk ZGJmODYzOWItNzNhOS00ZDdmLTg3N2MtMDEzMzExZGVlNWVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjOYpMuzzDJlYu2omTPHRQldwO3z1vuot9gMQ RlCMXIqyxbHY3f7lC0QVJPCY3ZidjMIRCm+Ipx1lpETMXf3YGuMoVpws7S5agmOe gjGH8Weowf3+xsYmjSOpuS4E5bCrkG8AJBjQxqDC5ixFQs+Wwqp7CQFgwJ8aYK1C Afz7B56Tiof9273eE59O/dGpuCP40g1Wr3aMr/7bPdXwrCzu9T0i4tHJMcZCOt2F QFtaEEw7Go548xX91ZvXZiOuORXmqSTRpUPIwOcz3834cfZJd6wW4inOsZ09LhXN 8hfq9AFHCxoL6cn7+fj7r/57G8re/yGCpVY7aX+MrOcFg4ZAowIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFGjrQfemZP1jbJbk12loZWkHBTBkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kZDcw YzNhMS02YWQwLTRjZGQtYWFkNy02MTMzODFmMGU2MGQvNmYyMGM5ZDgtMTA3ZS0z MTYxLTgzNjYtNzE0MDkyZTU3NDlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZGQ3MGMzYTEtNmFkMC00Y2RkLWFh ZDctNjEzMzgxZjBlNjBkL2RkNzBjM2ExLTZhZDAtNGNkZC1hYWQ3LTYxMzM4MWYw ZTYwZC5jcmwwHwYDVR0jBBgwFoAUMxtcGs7Weta/gi+QLvpGHMFRW2owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kZDcwYzNhMS02YWQwLTRjZGQtYWFkNy02MTMz ODFmMGU2MGQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYBJgL/JQ4w VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAF3o9qS3DG8aFpy37uK7uHmtkNBzXv/PpSfk0erBoxRVDr8iKdwhY u7taYasfLLhPzC+fJFa7Dnu1xtIbmyZGYJ2es5Y7EfZudr93yRT2BxeI5LKzBx60 FzAQqsqCdeu69NPn8QI7mlFrRCTUzQ2v5y9guBsW79GJUJch8YMRYqdedzlsnjZ3 ncK85z2WUeFtJny9RjxqdhvAzTngc23hN4PQEUulMIhXXOcvvg1Ec7K/aZbiIzHC C7hEGomVgjQA9N+HQrHyBj52iXepbUG8AhM18LYq33gay1wzYheXQKJfrLuV/7tZ aoujyhaBfNuw0F37awk9JBXcmfdOjf1Hcg== -----END CERTIFICATE-----Generated at Tue May 13 13:24:59 2025 by rpki-client